Drachtio

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Drachtio records in CISA KEV

No Drachtio vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2022-22432 CVE-2022-45474 · GHSA-mc63-4cpc-gjqj

HIGH 82

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01022 Published 2022-11-18 No fix listed CWE-416

TI-2022-23591 CVE-2022-47517 · GHSA-c8mq-83h4-gm57

HIGH 72

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01562 Published 2022-12-18 No fix listed CWE-193

TI-2022-23590 CVE-2022-47516 · GHSA-w32h-m3r8-mq4c

HIGH 72

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01758 Published 2022-12-18 No fix listed CWE-617

TI-2022-23589 CVE-2022-47515 · GHSA-44mv-gf6j-pvgx

HIGH 72

An issue was discovered in drachtio-server before 0.8.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2022-12-18 No fix listed CWE-170

TI-2022-22693 CVE-2022-45909 · GHSA-w3rv-r6q7-vcpw

MEDIUM 41

drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01076 Published 2022-11-26 No fix listed CWE-125

TI-2022-22431 CVE-2022-45473 · GHSA-xffq-h277-r59h

LOW 25

In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00293 Published 2022-11-18 No fix listed